Full Job Description
Job Description:
"Key Responsibilities
• Design and implement cloud network architectures across Azure (VNet, ExpressRoute, VPN Gateway), AWS (VPC, TGW, Direct Connect), and OCI (VCN, DRG, FastConnect).
• Configure and manage BGP routing across ExpressRoute CloudLink circuits and on-premise peering.
• Troubleshoot network connectivity issues across hybrid and multi-cloud environments including asymmetric routing, firewall drops, and DNS resolution failures.
• Manage Fortinet NGFW (FortiGate) NVA configurations on Azure and OCI for north-south and east-west traffic inspection.
• Configure NSGs, UDRs, Security Lists, NACLs, and route propagation across cloud platforms.
• Support ExpressRoute gateway SKU upgrades and circuit bandwidth changes.
• Manage DNS architecture: Azure Private DNS Zones, Route 53 Private Hosted Zones, OCI DNS, and custom resolvers.
• Collaborate with CGI and third-party network providers on change management and incident resolution.
• Investigate VPC Flow Log data and Azure Network Watcher logs for connectivity diagnostics.
• Produce and maintain network architecture diagrams, runbooks, and change documentation.
Required Qualifications
• Networking experience with in cloud network engineering.
• Deep expertise in Azure Networking: VNet, ExpressRoute, VPN Gateway, Azure Firewall, Azure DNS.
• Strong knowledge of AWS Networking: VPC, TGW, Direct Connect, Route 53, ALB/NLB, PrivateLink.
• Hands-on experience with OCI Networking: VCN, DRG, FastConnect, Security Lists.
• Experience with BGP routing, route summarization, and AS-PATH manipulation.
• Proficiency with Fortinet FortiGate NVA configuration (policies, routing, HA failover).
• Understanding of DNS resolution across hybrid environments (conditional forwarders, Private DNS Zones).
• Microsoft Certified: Azure Network Engineer Associate (AZ-700) preferred.
• AWS Advanced Networking Specialty.
Nice to Have
• Experience working alongside MSP/carrier-managed ExpressRoute envir onments.
• Knowledge of SASE, SD-WAN, or Zscaler Private Access (ZPA) architectures.
Salary Range - CA$ 90,000 - CA$ 120,000 Per Year
TCS does not use artificial intelligence tools for candidate screening or evaluation. This post is for a current vacancy. The hiring process includes an initial screening, followed by a technical evaluation and managerial discussion.